This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa
File: 4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa (raw, json)
Hash identifier: iQJVRs6WBEd0Gb45crtmBc2wJzXH0++1oDGdcewo5pc=
Subject key identifier: E1:0C:8A:2A:97:AD:FB:2F:FD:61:C4:C1:CB:F4:EB:62:81:83:43:98
Certificate issuer: /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial: 019B77C75A04B33A6389939154407B5D243E
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa
Signing time: Thu 01 Jan 2026 04:18:31 +0000
ROA not before: Thu 01 Jan 2026 04:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57846
IP address blocks: 37.130.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:5a:04:b3:3a:63:89:93:91:54:40:7b:5d:24:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Validity
Not Before: Jan 1 04:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e10c8a2a97adfb2ffd61c4c1cbf4eb6281834398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:11:18:99:36:67:5f:bf:89:87:d6:c2:6b:
de:19:be:a3:23:01:9c:e9:33:58:dc:27:a1:b7:e3:
88:75:69:dc:88:73:56:c8:16:d3:7d:33:6d:25:a5:
3f:e7:0e:5d:13:db:11:64:4e:38:8a:aa:fd:16:fb:
f4:23:19:90:8d:a2:58:cf:cc:bd:8b:69:e0:5a:fd:
c8:c3:d6:89:27:ad:83:f4:b3:51:f1:33:e8:92:3e:
ef:58:11:cf:68:57:21:74:14:fc:a6:d2:60:da:02:
04:a7:bb:07:ab:45:a4:40:74:fd:1c:14:13:14:01:
14:6f:4d:f9:bc:f1:ab:8d:72:ba:c6:30:3b:23:d5:
6f:b8:58:8e:14:43:78:0b:95:4e:f7:f2:3a:59:f6:
be:70:50:56:c3:a6:65:2d:9e:d8:a5:12:5b:ef:e4:
1a:79:a5:ff:53:e3:43:25:09:11:e7:ac:44:a1:64:
6e:e6:cd:31:2e:10:26:f3:ea:00:00:6f:29:9a:c2:
ea:87:95:f7:6e:2d:be:72:46:d0:6b:82:db:4c:81:
3b:c8:f4:3e:8d:3b:13:76:9d:24:85:99:de:ca:0f:
81:da:de:68:b7:a8:54:d7:b0:c0:e7:e6:86:d3:51:
9f:8f:ae:50:72:f3:b4:c7:47:b4:fd:8d:63:6c:b2:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:8A:2A:97:AD:FB:2F:FD:61:C4:C1:CB:F4:EB:62:81:83:43:98
X509v3 Authority Key Identifier:
keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/4QyKKpet-y_9YcTBy_TrYoGDQ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.152.0/21
Signature Algorithm: sha256WithRSAEncryption
75:2b:63:fa:15:98:d9:ac:a6:77:e4:11:c8:9c:7c:45:1b:68:
ee:fb:c5:7c:0d:fc:87:f3:4c:d7:53:5d:26:37:0f:52:42:ae:
f0:7e:49:a0:86:a3:86:f4:ae:56:d9:9e:8e:4c:70:f0:65:e6:
8d:1c:a9:0a:0d:f4:6f:a9:b4:fc:d3:9f:8e:6e:c4:de:f2:4a:
03:7c:bc:01:30:29:31:d8:e7:4f:ec:f1:65:d3:03:5c:f8:27:
ab:78:17:52:86:f8:c1:c7:53:e2:fc:99:33:e4:84:18:67:65:
dd:81:3a:db:c2:9f:4a:3b:5f:2d:b6:15:0e:f3:42:38:bc:f3:
52:c0:4d:5b:7e:b3:61:62:32:ff:e7:68:7d:85:2e:5f:42:0f:
74:22:64:bc:36:b1:2b:03:0d:57:fa:2e:c4:b2:6e:ce:f5:59:
5a:3c:db:0f:f7:cb:2d:dc:6a:42:6d:82:04:5f:60:28:b1:64:
0c:0f:e6:26:21:8f:58:5e:73:fe:4e:24:54:61:f4:80:d1:7b:
26:08:79:79:fc:52:94:d4:77:11:a6:51:e2:af:35:d8:93:b4:
ab:aa:e3:34:a9:36:b7:62:2e:32:94:13:a3:6c:be:1d:75:eb:
a4:fc:63:8d:8b:d4:d0:e4:c3:21:ef:ba:0d:68:a6:39:c3:64:
14:6c:00:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x1oEszpjiZORVEB7XSQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri
ZjYzMzUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTBjOGEyYTk3YWRmYjJmZmQ2MWM0YzFjYmY0ZWI2MjgxODM0Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3cRGJk2Z1+/iYfWwmveGb6jIwGc
6TNY3Ceht+OIdWnciHNWyBbTfTNtJaU/5w5dE9sRZE44iqr9Fvv0IxmQjaJYz8y9
i2ngWv3Iw9aJJ62D9LNR8TPokj7vWBHPaFchdBT8ptJg2gIEp7sHq0WkQHT9HBQT
FAEUb035vPGrjXK6xjA7I9VvuFiOFEN4C5VO9/I6Wfa+cFBWw6ZlLZ7YpRJb7+Qa
eaX/U+NDJQkR56xEoWRu5s0xLhAm8+oAAG8pmsLqh5X3bi2+ckbQa4LbTIE7yPQ+
jTsTdp0khZneyg+B2t5ot6hU17DA5+aG01Gfj65QcvO0x0e0/Y1jbLJEWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEMiiqXrfsv/WHEwcv062KBg0OYMB8GA1UdIwQY
MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt
NDZkZDEyMDVkY2ZmLzEvNFF5S0twZXQteV85WWNUQnlfVHJZb0dEUTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm
LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJYKYMA0G
CSqGSIb3DQEBCwUAA4IBAQB1K2P6FZjZrKZ35BHInHxFG2ju+8V8DfyH80zXU10m
Nw9SQq7wfkmghqOG9K5W2Z6OTHDwZeaNHKkKDfRvqbT805+ObsTe8koDfLwBMCkx
2OdP7PFl0wNc+CereBdShvjBx1Pi/Jkz5IQYZ2XdgTrbwp9KO18tthUO80I4vPNS
wE1bfrNhYjL/52h9hS5fQg90ImS8NrErAw1X+i7Esm7O9VlaPNsP98st3GpCbYIE
X2AosWQMD+YmIY9YXnP+TiRUYfSA0XsmCHl5/FKU1HcRplHirzXYk7SrquM0qTa3
Yi4ylBOjbL4ddeuk/GONi9TQ5MMh77oNaKY5w2QUbABF
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:51 2026 by rpki-client